JDBC log source parameters for Microsoft SQL Server

If QRadar® does not automatically detect the log source, add a Microsoft SQL Server log source on the QRadar Console by using the JDBC protocol.

When using the JDBC protocol, there are specific parameters that you must use.

The following table describes the parameters that require specific values to collect JDBC events from Microsoft SQL Server:

Table 1. JDBC log source parameters for the Microsoft SQL Server DSM
Parameter	Value
Log Source type	Microsoft SQL Server
Protocol Configuration	JDBC
Log Source Identifier	Type a name for the log source. The name can't contain spaces and must be unique among all log sources of the log source type that is configured to use the JDBC protocol. If the log source collects events from a single appliance that has a static IP address or host name, use the IP address or host name of the appliance as all or part of the Log Source Identifier value; for example, 192.168.1.1 or JDBC192.168.1.1. If the log source doesn't collect events from a single appliance that has a static IP address or host name, you can use any unique name for the Log Source Identifier value; for example, JDBC1, JDBC2.
Database Type	From the list, select MSDE.
Database Name	Type `Master` as the name of the Microsoft SQL database.
IP or Hostname	Type the IP address or host name of the Microsoft SQL server.
Port	Type the port number that is used by the database server. The default port for MSDE is 1433. The JDBC configuration port must match the listener port of the Microsoft SQL database. The Microsoft SQL database must have incoming TCP connections that are enabled to communicate with QRadar. Important: If you define a Database Instance when you are using MSDE as the Database Type, you must leave the Port parameter blank in your configuration.
Table Name	Type `dbo.AuditData` as the name of the table or view that includes the audit event records.
Compare Field	Type `event_time` in the Compare Field parameter. The Compare Field identifies new events that are added between queries, in the table.

For a complete list of JDBC protocol parameters and their values, see JDBC protocol configuration options.